Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cj9f-gcwh-7q49

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

EPSS

Процентиль: 3%
0.00018
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 лет назад

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

CVSS3: 5.1
redhat
около 2 лет назад

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

CVSS3: 5.5
nvd
около 2 лет назад

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

CVSS3: 5.5
msrc
6 месяцев назад

Описание отсутствует

CVSS3: 5.5
debian
около 2 лет назад

An issue was discovered in the C AMQP client library (aka rabbitmq-c) ...

EPSS

Процентиль: 3%
0.00018
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-522